STUD-10494 Bump fsevents lockfile dependency

[kevinbrock-wk]

Summary

• Bumps the fork's locked fsevents development dependency from 1.2.4 to 1.2.13.
• Refreshes package-lock.json with a current npm install so the lockfile is up to date outside Dependabot.
• Keeps the package on the fsevents 1.x line because the current build toolchain resolves it through chokidar@1.7.0, which declares fsevents:^1.0.0.

Why not fsevents 2.x here?

fsevents@2.3.3 is the npm latest release, but it is not a drop-in lockfile bump for this fork. The dependency path is:

webpack@1.15.0 -> watchpack@0.2.9 -> chokidar@1.7.0 -> fsevents:^1.0.0

Moving cleanly to fsevents@2.x would require modernizing the fork's legacy build/watch stack, especially webpack@1 / watchpack@0 / chokidar@1. That is larger than this patch and carries more build risk.

Validation

• npm ci
• npm install --package-lock-only --ignore-scripts
• npm ci
• npm run build

Follow-up

After this PR merges, update oc-builder's pnpm-lock.yaml so github:Workiva/react-dnd-mouse-backend resolves to the merged fork commit.

Made with Cursor

[kevinbrock-wk]

QA +1

[kevinbrock-wk]

@Workiva/release-management-p